Issues

• Coverage floors are never enforced — the 95/90 floor on materialization/pure/ has never been checked

  needs-triage
  eth-man/nexuspuppet#267 · Filter by author eth-man opened on Oct 1, 2026

• Estate-wide resource search (ADR-0025)

  enhancement
  eth-man/nexuspuppet#249 · Filter by author eth-man opened on Aug 18, 2026

• No way to report on nodes by fact — "show me every Ubuntu 22.04 box"

  needs-triage
  eth-man/nexuspuppet#243 · Filter by author eth-man opened on Aug 17, 2026

• Object-scoped permissions (NetBox ObjectPermission constraints) for the enterprise layer

  needs-triage
  eth-man/nexuspuppet#230 · Filter by author eth-man opened on Aug 12, 2026

• Pick pinned nodes from a list instead of typing certnames

  needs-triage
  eth-man/nexuspuppet#224 · Filter by author eth-man opened on Aug 12, 2026
  1

• Theme preference follows the browser, not the operator

  needs-triage
  eth-man/nexuspuppet#198 · Filter by author eth-man opened on Aug 11, 2026

• Enabling the bundled TLS proxy leaves the console blind to its own certificate

  needs-triage
  eth-man/nexuspuppet#136 · Filter by author eth-man opened on Aug 6, 2026

• NexusPuppet has no machine credential

  needs-triage
  eth-man/nexuspuppet#129 · Filter by author eth-man opened on Aug 6, 2026

• OIDC pending-login state is per-process, so a second API replica breaks redirect logins

  bugneeds-triage
  eth-man/nexuspuppet#109 · Filter by author eth-man opened on Aug 5, 2026

• Signing out does not end the session at the identity provider (no RP-initiated logout)

  enhancementneeds-triage
  eth-man/nexuspuppet#108 · Filter by author eth-man opened on Aug 5, 2026